Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

luci-app-libreswan: Add LuCI for Libreswan #5932

Closed
wants to merge 1 commit into from
Closed

luci-app-libreswan: Add LuCI for Libreswan #5932

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions applications/luci-app-libreswan/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
#
# Copyright (C) 2022 Jaymin Patel <[email protected]>
#
# This is free software, licensed under the GNU General Public License v2.
#

include $(TOPDIR)/rules.mk

PKG_LICENSE:=GPL-2.0-or-later
PKG_MAINTAINER:=Jaymin Patel <[email protected]>

LUCI_TITLE=Luci Application for IPSec VPN (Libreswan)
LUCI_DEPENDS:=+luci-base +libreswan
LUCI_PKGARCH:=all

include ../../luci.mk

# call BuildPackage - OpenWrt buildroot signature

72 changes: 72 additions & 0 deletions applications/luci-app-libreswan/htdocs/luci-static/resources/view/libreswan/globals.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,72 @@
'use strict';
'require view';
'require form';
'require network';
'require tools.widgets as widgets';

return view.extend({
load: function() {
return Promise.all([
network.getDevices(),
]);
},

render: function(data) {
var netDevs = data[0];
var m, s, o;

m = new form.Map('libreswan', _('IPSec Global Settings'));

s = m.section(form.NamedSection, 'globals', 'libreswan');
s.anonymous = false;
s.addremove = false;

o = s.option(form.ListValue, 'debug', _('Debug Logs'));
o.default = false;
o.rmempty = false;
o.value('none', _('none - No Logging'));
o.value('base', _('base - Moderate Logging'));
o.value('cpu-usage', _('cpu-usage - Timing/Load Logging'));
o.value('crypto', _('crypto - All crypto related Logging'));
o.value('tmi', _('tmi - Too Much/Excessive Logging'));
o.value('private', _('private - Sensitive private-key/password Logging'));
o.default = 'none'

o = s.option(form.Flag, 'uniqueids', _('Uniquely Identify Remotes'),
_('Whether IDs should be considered identifying remote parties uniquely'));
o.default = false;
o.rmempty = false;

o = s.option(widgets.NetworkSelect, 'listen_interface', _('Listen Interface'),
_('Interface for IPsec to use'));
o.datatype = 'string';
o.multiple = false;
o.optional = true;

o = s.option(form.Value, 'listen', _('Listen Address'),
_('IP address to listen on, default depends on Listen Interface'));
o.datatype = 'ip4addr';
for (var i = 0; i < netDevs.length; i++) {
var addrs = netDevs[i].getIPAddrs();
for (var j = 0; j < addrs.length; j++) {
o.value(addrs[j].split('/')[0]);
}
}
o.depends({ 'listen_interface' : '' });

o = s.option(form.Value, 'nflog_all', _('Enable nflog on nfgroup'),
_('NFLOG group number to log all pre-crypt and post-decrypt traffic to'));
o.datatype = 'uinteger';
o.default = 0;
o.rmempty = true;
o.optional = true;

o = s.option(form.DynamicList, 'virtual_private', _('Allowed Virtual Private'),
_('The address ranges that may live behind a NAT router through which a client connects'));
o.datatype = 'neg(ip4addr)';
o.multiple = true;
o.optional = true;

return m.render();
}
});
77 changes: 77 additions & 0 deletions applications/luci-app-libreswan/htdocs/luci-static/resources/view/libreswan/overview.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,77 @@
'use strict';
'require view';
'require rpc';
'require form';
'require poll';

var callLibreswanStatus = rpc.declare({
object: 'libreswan',
method: 'status',
expect: { },
});

function secondsToString(seconds) {
var str = '';
var numdays = Math.floor(seconds / 86400);
var numhours = Math.floor((seconds % 86400) / 3600);
var numminutes = Math.floor(((seconds % 86400) % 3600) / 60);
var numseconds = ((seconds % 86400) % 3600) % 60;

str = (numdays ? numdays + 'd ' : '') + (numhours ? numhours + 'h ' : '') + (numminutes ? numminutes + 'm ' : '') + numseconds + 's';
return str;
}

return view.extend({
render: function() {
var table =
E('table', { 'class': 'table lases' }, [
E('tr', { 'class': 'tr table-titles' }, [
E('th', { 'class': 'th' }, _('Name')),
E('th', { 'class': 'th' }, _('Remote')),
E('th', { 'class': 'th' }, _('Local Subnet')),
E('th', { 'class': 'th' }, _('Remote Subnet')),
E('th', { 'class': 'th' }, _('Tx')),
E('th', { 'class': 'th' }, _('Rx')),
E('th', { 'class': 'th' }, _('Phase1')),
E('th', { 'class': 'th' }, _('Phase2')),
E('th', { 'class': 'th' }, _('Status')),
E('th', { 'class': 'th' }, _('Uptime')),
E([])
])
]);

poll.add(function() {
return callLibreswanStatus().then(function(tunnelsInfo) {
var tunnels = Array.isArray(tunnelsInfo.tunnels) ? tunnelsInfo.tunnels : [];

cbi_update_table(table,
tunnels.map(function(tunnel) {
return [
tunnel.name,
tunnel.right,
tunnel.leftsubnet,
tunnel.rightsubnet,
tunnel.tx,
tunnel.rx,
tunnel.phase1 ? _('Up') : _('Down'),
tunnel.phase2 ? _('Up') : _('Down'),
tunnel.connected ? _('Up') : _('Down'),
secondsToString(tunnel.uptime),
];
}),
E('em', _('There are no active Tunnels'))
);
});
});

return E([
E('h3', _('IPSec Tunnels Summary')),
E('br'),
table
]);
},

handleSave: null,
handleSaveApply:null,
handleReset: null
});
56 changes: 56 additions & 0 deletions applications/luci-app-libreswan/htdocs/luci-static/resources/view/libreswan/proposals.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
'use strict';
'require view';
'require ui';
'require form';

return view.extend({
render: function() {
var m, s, o;

m = new form.Map('libreswan', _('IPSec Proposals'));

s = m.section(form.GridSection, 'crypto_proposal');
s.anonymous = false;
s.addremove = true;
s.nodescriptions = true;
s.addbtntitle = _('Add Proposal');

o = s.tab('general', _('General'));

o = s.taboption('general', form.MultiValue, 'hash_algorithm', _('Hash Algorithm'), ('* = %s').format(_('Unsafe')));
o.default = 'md5';
o.value('md5', _('MD5*'));
o.value('sha1', _('SHA1*'));
o.value('sha256', _('SHA256'));
o.value('sha384', _('SHA384'));
o.value('sha512', _('SHA512'));

o = s.taboption('general', form.MultiValue, 'encryption_algorithm', _('Encryption Method'), ('* = %s').format(_('Unsafe')));
o.default = 'aes';
o.value('3des', _('3DES*'))
o.value('aes', _('AES'))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mark AES as default.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated

o.value('aes_ctr', _('AES_CTR'));
o.value('aes_cbc', _('AES_CBC'));
o.value('aes128', _('AES128'));
o.value('aes192', _('AES192'));
o.value('aes256', _('AES256'));
o.value('camellia_cbc', _('CAMELLIA_CBC'));

o = s.taboption('general', form.MultiValue, 'dh_group', _('DH Group'),
('* = %s <a href="%s">RFC8247</a>.').format(_('Unsafe, See'), 'https://www.rfc-editor.org/rfc/rfc8247#section-2.4'));
o.default = 'modp1536';
o.value('modp1536', _('DH Group 5*'));
o.value('modp2048', _('DH Group 14'));
o.value('modp3072', _('DH Group 15'));
o.value('modp4096', _('DH Group 16'));
o.value('modp6144', _('DH Group 17'));
o.value('modp8192', _('DH Group 18'));
o.value('dh19', _('DH Group 19'));
o.value('dh20', _('DH Group 20'));
o.value('dh21', _('DH Group 21'));
o.value('dh22', _('DH Group 22*'));
o.value('dh31', _('DH Group 31'));

return m.render();
}
});
Loading